$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: uO6GG8CoPA30ialoJph9fKjkOomExk6OxolK5SLYq8w= Subject key identifier: 60:D1:EF:42:EC:28:D6:CD:B6:3C:1E:AE:0D:76:91:5F:F0:77:B6:2D Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0BEB Signing time: Fri 22 Nov 2024 18:24:34 +0000 Manifest this update: Fri 22 Nov 2024 18:24:33 +0000 Manifest next update: Fri 29 Nov 2024 18:24:33 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: Xzgm5jGC/BlSk8vSaPMP3El+AX6+Qe6ibzPmecFD1eY=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: ZOGumPt0pB9AbK2uRuPCw40qDj5EBhWflSGcy7nElfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Nov 22 18:24:33 2024 GMT Not After : Nov 29 18:24:33 2024 GMT Subject: CN=6740cc62-393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:4b:97:a2:8b:cb:2f:56:b5:0c:76:9c:92: b2:85:5c:ca:10:c2:66:1d:d2:30:5f:19:19:31:a4: 1c:74:4a:cd:94:55:e3:ba:db:e2:f4:de:0c:78:0e: b6:3f:a9:2d:08:13:01:61:77:49:23:d9:89:b3:c3: f0:28:13:19:92:7e:21:23:3b:4b:04:bd:83:ff:2e: d7:96:67:48:e1:78:ff:60:98:25:b7:37:50:5d:05: df:ae:b2:cb:13:46:28:0f:d9:bc:01:7c:07:a0:1b: 4f:38:28:cc:c4:c4:8d:3c:03:35:44:d9:6d:ca:73: 7d:fb:4f:2a:da:10:11:a2:a7:8d:24:0a:1c:e7:46: 17:d1:ec:8c:3b:7e:e2:33:62:91:12:f8:0d:a3:68: ea:0c:6d:c0:0e:49:b5:d1:3f:d2:25:55:92:c1:15: 0a:35:80:fb:87:f0:72:30:1c:8b:ac:6b:fa:cd:e2: b5:c0:ac:df:0d:96:fb:fa:65:e7:d9:d1:f7:23:fa: bb:99:d3:f0:4a:e2:f7:12:d2:b5:b4:e4:18:d0:06: 37:45:9e:68:7d:66:0b:d4:b1:db:33:b8:2b:2e:7b: 4e:a9:0c:d4:6d:40:0c:ff:cd:ad:36:7e:c7:6c:49: 9f:ea:c0:78:4c:1c:90:e0:01:b8:b2:44:c0:1f:a4: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:EF:42:EC:28:D6:CD:B6:3C:1E:AE:0D:76:91:5F:F0:77:B6:2D X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:03:34:16:ee:38:16:44:1f:cc:4e:5d:aa:0b:19:42:15:be: 39:6c:07:64:d5:52:76:40:c8:ac:76:ae:27:20:e9:e4:87:30: 33:61:e1:b4:f1:e7:5d:74:5f:f4:52:63:b7:92:e2:db:c4:b4: a4:7c:e9:31:25:4d:e9:17:bf:ff:9e:21:57:c9:fe:f3:09:be: cf:02:7b:e5:69:fa:91:f4:21:cb:40:da:e9:86:56:3d:f5:25: 65:b5:5b:fa:e8:a7:84:41:12:0f:5d:1a:c3:2a:5a:bb:cc:1c: bc:fa:2f:ee:c9:70:ce:a7:91:57:af:19:c5:1b:b1:68:3d:97: 69:8d:3e:9e:ab:79:77:0d:3d:0b:6e:df:6d:f9:1d:28:11:71: c1:1e:c3:2f:af:f5:78:be:f9:a8:62:3b:aa:d0:c6:2b:ef:02: e6:19:db:37:37:bf:16:d9:38:7c:c9:5c:12:ad:69:be:ec:98: 37:3f:cb:34:eb:3d:c6:a2:aa:8e:fc:6b:6d:c7:98:15:d8:b0: 0a:ff:fa:a6:af:34:86:22:4c:a9:da:98:d2:ba:d3:dd:42:2f: 9b:84:c3:23:0a:34:f5:70:1e:b0:b9:67:7a:3f:6f:35:fa:89: 06:8e:81:b8:f3:76:b9:1d:31:1a:c7:c4:60:63:90:23:2d:1f: 2b:bc:97:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjQxMTIyMTgyNDMzWhcNMjQxMTI5MTgyNDMzWjAYMRYwFAYD VQQDEw02NzQwY2M2Mi0zOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVJLl6KLyy9WtQx2nJKyhVzKEMJmHdIwXxkZMaQcdErNlFXjutvi9N4MeA62 P6ktCBMBYXdJI9mJs8PwKBMZkn4hIztLBL2D/y7XlmdI4Xj/YJgltzdQXQXfrrLL E0YoD9m8AXwHoBtPOCjMxMSNPAM1RNltynN9+08q2hARoqeNJAoc50YX0eyMO37i M2KREvgNo2jqDG3ADkm10T/SJVWSwRUKNYD7h/ByMByLrGv6zeK1wKzfDZb7+mXn 2dH3I/q7mdPwSuL3EtK1tOQY0AY3RZ5ofWYL1LHbM7grLntOqQzUbUAM/82tNn7H bEmf6sB4TByQ4AG4skTAH6RbuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDR70Ls KNbNtjwerg12kV/wd7YtMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNAzQW7jgWRB/MTl2qCxlCFb45bAdk1VJ2QMisdq4nIOnkhzAzYeG0 8edddF/0UmO3kuLbxLSkfOkxJU3pF7//niFXyf7zCb7PAnvlafqR9CHLQNrphlY9 9SVltVv66KeEQRIPXRrDKlq7zBy8+i/uyXDOp5FXrxnFG7FoPZdpjT6eq3l3DT0L bt9t+R0oEXHBHsMvr/V4vvmoYjuq0MYr7wLmGds3N78W2Th8yVwSrWm+7Jg3P8s0 6z3GoqqO/Gttx5gV2LAK//qmrzSGIkyp2pjSutPdQi+bhMMjCjT1cB6wuWd6P281 +okGjoG483a5HTEax8RgY5AjLR8rvJdf -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org